Privacy Policy

Information we collect

We collect information in three ways:

• Information you give us — your name, email, phone number, shipping/billing address, appointment or product preferences, and messages you send us through forms, bookings, or purchases.
• Payment information — card payments are processed by our payment provider, Stripe. We do not store full card numbers on our servers; we retain limited details such as the card brand and last four digits for order records.
• Information collected automatically — device and browser type, pages viewed, referring links, and similar usage data collected through cookies and similar technologies (see “Cookies” below).

A note on health information

Please do not submit detailed medical history, conditions, or other sensitive health information through general Site forms (such as the contact or newsletter forms). Clinical information is collected securely through your patient portal and in-clinic intake, where it is protected as required by law. Information you voluntarily provide about your interests or goals through the Site is treated as confidential and used only to serve you.

How we use your information

• Provide, process, and fulfill bookings, orders, subscriptions, and requests.
• Communicate with you about appointments, orders, and customer service.
• Send marketing or promotional messages where you have opted in, which you can opt out of at any time.
• Operate, secure, analyze, and improve the Site.
• Comply with legal obligations and enforce our terms.

Cookies and tracking technologies

We use two categories of cookies and similar technologies:

• Essential cookies — required for the Site to function (for example, keeping items in your cart or maintaining your session). These are always on.
• Analytics and marketing cookies — used to understand how the Site is used and to measure advertising (for example, Google Analytics and the Meta Pixel). These load only after you accept cookies in our banner.

When you first visit, our cookie banner lets you Accept or Decline non-essential cookies. If you decline, analytics and marketing technologies are not loaded. You can also control cookies through your browser settings. To change your choice later, clear this site's cookies/site data in your browser and reload the page to bring the banner back.

How we share information

We do not sell your personal information for money. We share information only as needed:

• Service providers who work on our behalf — for example, Stripe (payments), our fulfillment and shipping partners, email/SMS providers, and analytics providers — under obligations to protect it.
• Legal and safety — when required by law, to enforce our terms, or to protect our rights, customers, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

Some analytics and advertising cookies may result in information being “shared” for cross-context behavioral advertising under California law. You can opt out of this by declining cookies in our banner and by using the “Your Privacy Choices” option below.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know what personal information we collect, use, and disclose.
• Request access to or deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information.
• Limit the use of sensitive personal information.
• Not be discriminated against for exercising these rights.

Your Privacy Choices: to opt out of analytics/advertising cookies, choose “Decline” in our cookie banner. To make any other request, email admin@beautyloungemed.com with the subject “Privacy Request.” We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

Data retention

We keep personal information for as long as needed to provide our services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements, then delete or de-identify it.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13, and our services are not directed to anyone under 18 without a parent or guardian.

Third-party links

The Site may link to third-party websites and services we do not control. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date.

Contact us

Beauty Lounge Med Spa · 151 Aptos Village Way, Suite 306, Aptos, CA 95003 · admin@beautyloungemed.com · (831) 251-6264.